mirror of
https://github.com/rkivalin/certforge.git
synced 2026-10-13 08:00:43 +00:00
expires_within_days() compared the exact expiry timestamp against now + N days, so a cert with 3 days 23 hours remaining would report "days_remaining=3" but not renew with renew_before_days=3. Fix by rounding days_until_expiry() to the nearest day (using seconds for precision) instead of truncating. This matches user expectations and provides a half-day buffer that absorbs systemd timer randomization delays. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>